Microsoft: As of October, 1024-Bit Certs Are the New Minimum

way2trivial writes with this snippet from Information Week about a warning from Microsoft reminding Windows administrators that an update scheduled for October 9th will require a higher standard for digital certificates. "That warning comes as Microsoft prepares to release an automatic security update for Windows on Oct. 9, 2012, that will make longer key lengths mandatory for all digital certificates that touch Windows systems. ... Internet Explorer won't be able to access any website secured using an RSA digital certificate with a key length of less than 1,024 bits. ActiveX controls might be blocked, users might not be able to install applications, and Outlook 2010 won't be able to encrypt or digitally sign emails, or communicate with an Exchange server for SSL/TLS communications."

Comments

Close Goate.cx instead

[Anonymous Coward]

Wouldn't be much of an OS if it didn't have a reach-around.

Re:Close Goate.cx instead

[Anonymous Coward]

With Microsoft products, it always more of a bend-over than a reach-around.

Re:open source

[Anonymous Coward]

Did you oversee Debian's SSH build when they fucked it up?

I did. I'm sorry, but that week the NSA check came late, so I wasn't able to make the compromises less obvious.

They paid up later.

Re:open source

[gagol]

Not true, I heard many people were able to download the source code since then ;-)

Re:Why 1024?

[Anonymous Coward]

I am sorry to tell you that Certs are predominately used to secure communication between two points.

And Certs have Retsin for fresh clean breath!

Sorry, I had to....